Advanced Search

Return to Snippet

Revision: 16471
at August 5, 2009 13:32 by occam
Initial Code 
<Directory "/example/htdocs/wp-content/uploads/">
        php_admin_flag engine off
    </Directory>
    <Directory "/example/htdocs/wp-content/themes/">
        <Files *php>
            Order allow,deny
            Deny from all
        </Files>
    </Directory>
Initial URL 
http://codex.wordpress.org/Hardening_WordPress
Initial Description 
In addition to the recommendations on the Wordpress Website.

Limit the amount of PHP files that a writable by Apache. The directory's and files that need to be writable, do not always need to be executed by PHP directly.

This makes it a bit harder for the attacker to upload and execute any PHP commands.
Initial Title 
Hardening Wordpress
Initial Tags 
php, wordpress, apache, security
Initial Language 
Apache